pam_isolate

A PAM module to lock users into cgroups/namespaces on (interactive) logins. This makes it easy to restrict resource usage, monitor resource usage, and prevent crosstalk between users.

1. Install rustc
2. Install Vagrant
3. run make
4. run make vm

Log into the box using vagrant ssh and log into any user:

[vagrant@archlinux ~]$ su vagrant
Password:
Hello World!
[vagrant@archlinux ~]$

Tests

1. install shellinspector
2. make test

Notes

• You need to run mount --make-private / after every reboot to make mount namespaces work.